BIOS Management Overview
Overview
BIOS Management enables administrators to centrally configure and enforce BIOS settings on supported Windows devices directly from SureMDM. This helps organizations strengthen device security by controlling BIOS-level configurations such as supervisor passwords, secure boot settings, boot order, and hardware controls without requiring manual intervention on individual devices.
In the initial release, BIOS Management supports Lenovo Windows devices and provides administrators with the ability to create reusable BIOS configurations, assign them to devices, and monitor deployment status.
Prerequisites
Before creating a BIOS configuration, ensure that:
- BIOS Management is enabled for the SureMDM account.
- Target devices are enrolled in SureMDM.
- Devices are running SureMDM Windows Agent 6.30.0 and later.
- The devices are Lenovo Windows devices supported by the BIOS Management feature.
- Administrator credentials required for BIOS modifications are available, where applicable.
Enabling BIOS Management
Before creating and deploying BIOS configurations, BIOS Management must be enabled at the account level.
To enable BIOS Management:
- Navigate to Account Settings > Windows Management > Miscellaneous.
- Under the BIOS Management section, enable the Enable BIOS Management option.
- Save the changes.
BIOS Management is supported on Windows devices running SureMDM Agent version 6.30.0 and later.
Navigating to BIOS Management
To access BIOS Management:
- Log in to the SureMDM Console.
- Navigate to Security > BIOS Management.
- Select the Configuration tab.
The Configuration page displays all BIOS configurations created within the account along with configuration details and management actions.